Privacy Policy & Data Protection
This Privacy Policy explains how Rycle AI ("we", "us", or "our") collects, uses, processes, and protects your information when you access our website, applications, APIs, live chat widget, and connected social media integrations (including Meta, WhatsApp, Instagram, and LinkedIn).
1Information We Collect
We collect information in the following categories:
- Account & Workspace Information: Name, business name, email address, password hash, and billing contact details when you register for an account.
- Conversational & Customer Support Data: Messages, customer queries, timestamps, sender identifiers, and agent replies transmitted via our embeddable chat widget, Meta Messenger webhook, Instagram DMs, or WhatsApp Cloud API.
- Customer Order & Delivery Information: Customer name, phone number, shipping address, order items, and payment status collected during conversational checkouts.
- Connected Social Platform Tokens: OAuth access tokens, Page IDs, and business account identifiers granted by Meta Platforms, Inc. or other social providers to automate messaging and post scheduling on your behalf.
- Knowledge Base Documents: Text, FAQs, catalogs, and crawled website content you upload to train your custom AI agent.
2How We Use Your Information
Your data is processed strictly for the following purposes:
- To provide 24/7 autonomous customer service and order processing via our conversational AI models (Google Gemini API).
- To synchronize multi-channel customer inquiries into your Unified Social Inbox in real time.
- To execute automated comment replies and publish scheduled social media updates authorized by you.
- To generate checkout sessions and calculate location-based delivery charges.
- To track subscription message usage and enforce plan quotas.
3AI Processing & Sub-processors
Rycle AI utilizes Google Cloud / Google Gemini API for natural language generation and pgvector embeddings. When a customer sends a message, relevant context from your business knowledge base is provided to generate a response. Google Cloud does not retain or use customer inputs to train base models.
Payment processing is handled via PCI-DSS compliant providers (Stripe, SSLCommerz, and local gateway partners). Rycle AI never stores raw credit card numbers.
Facebook / Meta User Data Deletion Instructions
In accordance with Meta Platform Developer Policies, users who have connected their Facebook account or interacted with our Messenger/Instagram integrations have the right to request deletion of their data at any time.
How to request removal of your data:
- Log in to your Facebook profile and navigate to Settings & Privacy → Settings → Apps and Websites.
- Find Rycle AI in the list of active apps and click Remove.
- Click View Removed Apps and Websites, find Rycle AI, and click Send Request to trigger automated server data deletion.
- Alternatively, you can email our Data Protection Officer directly at
privacy@rycle-bd.comwith your Page ID or email address. We will permanently purge all stored customer messages, tokens, and leads associated with your ID within 48 business hours.
You can check the real-time status of any active deletion request by querying our deletion confirmation endpoint at https://rycle-bd.com/api/auth/meta-data-deletion.
5Security & Data Retention
All traffic between user browsers, third-party APIs, and our servers is encrypted using modern TLS 1.3 encryption. Tenant databases are hosted in dedicated Supabase enterprise cloud infrastructure with cryptographic session token validation.
We retain business account data as long as your workspace subscription is active. Upon account deletion, all knowledge documents, vector embeddings, customer chat histories, and social tokens are permanently deleted from database tables.
Contact Our Data Privacy Officer
For questions about this Privacy Policy, your personal data, or compliance requests: